stpa software module - reykjavik university –information security, rm studio® safety-critical...
TRANSCRIPT
STPA Software ModuleA Eurostars Funded Project
5th European STAMP/STPA Workshop and Conference
13 - 15 September 2017 - Reykjavík, Iceland
Christopher Brown and Jianfei Zheng
The Project Objectives
• Provide the STPA methodology in a structured software application
• Incorporate with a successful risk management software – Risk Management Studio®
• Operation as an independant analysis tool or in conjunction with traditional risk management
Objectives Visual Representation
Principle Participants
Stiki – Information Security, RM Studio®
Safety-Critical Systems Research Lab of ZHAW,Zurich University of Applied Sciences
Additional support:• Eurostars• Technology Development Fund, Iceland• Swiss Confederation, Federal Department of Economic Affairs, State
Secretariat for Education, Research and Innovation SERI
Stiki‘s Story and Background
1992 2000 2002 2005 2006 2009 2011 2013 2015 2016 2018
Svana’s Research and Publications
2015 Comparison of Risk Analysis Methodologies – Risk Analysis for Better Design and Decision Making
4th STAMP Workshop at MIT, Boston, 23-26 March, ppt
2015 Comparison of Risk Analysis Methodologies in an Electrical Grid3rd European STAMP Workshop, Amsterdam, 4-6 October, ppt
2016 Risk Analysis in Design and Construction of a Hydropower Station4th European STAMP Workshop, Zürich, 13-15 September, ppt
2017 Embedding STPA into a Highly Successful Risk Management Software
6th STAMP Workshop at MIT, Boston, 23-26 March, ppt
Zurich University of Applied Sciences
• 10 person team with broad backgrounds and work experiences
• Promotes technological progress and methodologiesHazard and risk analysis
o STPA
Functional safety of complex, programmable systemsQuantitative safety analysesFormal specification, development and verification methods
• ResponsibilitiesApplied research and development projectsTeaching and consulting
Zurich University of Applied Sciences
2012 Evaluation of STPA in the Safety Analysis of the Gantry 2 Proton Radiation Therapy SystemMIT PhD Dissertation by Blandine Antoine, Presentations at 1st MIT STAMP Workshop
and 1st European STAMP Workshop 2013
2014 Use of STPA in Digital Instrumentation and Control Systems of Nuclear Power PlantsPresentations at 2nd European STAMP Workshop
2015 Tool Qualification Considerations for Tools Supporting STPAPaper and Presentations at 3rd European STAMP Workshop
2016 Assessing the Value of System Theoretic Process Analysis in a Pharmacovigilance Process: An Example Using Signal ManagementPharmaceutical Medicine, Springer and presentation at 4th ESW 2016
Primary Project Challenges
Researching and choosing a diagraming tool that would perform the necessary actions required and be compatible with RM Studio
Deciding how to incorporate the STPA methodology into a working platform that will meet the needs of diverse industries
Colaboration between project contributors across multiple locations in Europe that satisfies many different business processes
STPA Module Infrastructure
Database
Diagraming high quality complex designs
Modeling Step 1 and Step 2
Multiple users and ease of use
Review process and annotation
Reporting
Principal Project Managers
Stiki – Information Security
Svana Helen Björnsdóttiro Founder and CEO, Stiki ehf.o Engineering PhD Candidate, Reykjavík Universityo [email protected] ; stiki.eu
Zurich University of Applied Sciences – ZHAW
Martin RejzekoDeputy Head, Safety – Critical Systems Research [email protected]/iamp/sks
Participants Logos
Demonstration: STPA Analysis
Special thanks to Todd Pawlicki & co-authors for use of their STPA analysis.
Demonstration: STPA Analysis
Demonstration: STPA Analysis
Demonstration: STPA Analysis